
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1794D34C4E8F11F09F19E4CCDAE4EC9C.roa
File: 1794D34C4E8F11F09F19E4CCDAE4EC9C.roa (raw, json)
Hash identifier: oqg35ViYCRz4nobazfgEtH+hBWQge5mGYN8c5/ba7BI=
Subject key identifier: 33:35:4B:0E:E7:4A:9B:12:ED:B0:B3:77:B7:15:42:59:4D:AE:4B:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015DB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1794D34C4E8F11F09F19E4CCDAE4EC9C.roa
Signing time: Sat 21 Jun 2025 11:01:33 +0000
ROA not before: Sat 21 Jun 2025 11:01:29 +0000
ROA not after: Sun 27 Jul 2025 11:01:29 +0000
asID: 27951
IP address blocks: 45.192.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89526 (0x15db6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 11:01:29 2025 GMT
Not After : Jul 27 11:01:29 2025 GMT
Subject: CN=6856910d-9bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:7e:6f:8b:f1:d9:9d:93:cb:b1:cd:32:aa:
e8:0b:b3:f8:0b:eb:6c:2a:ff:92:a4:9a:0a:ea:07:
75:01:00:f5:4f:7c:26:46:a2:14:3f:c0:5b:0e:ee:
31:c8:a2:61:83:c9:29:6e:fc:fe:0a:1c:e4:49:2b:
0d:4b:40:65:96:86:2a:c3:6b:40:8d:97:2a:ea:60:
8d:cb:d5:54:31:7e:cc:6c:24:9e:74:15:9c:37:31:
6c:0d:df:d8:49:8d:8c:42:08:1a:bd:88:db:96:04:
32:2d:b7:38:30:10:1a:37:02:0e:bd:ee:f9:8d:48:
cd:54:d8:0d:d8:2d:58:78:51:1d:94:fe:2b:b6:fc:
be:dc:33:97:c3:0a:36:44:72:9a:ad:78:4d:61:4a:
52:09:54:f9:b7:8d:02:2b:c1:b7:50:f7:43:6c:0e:
6f:30:2f:3a:13:6b:fa:fc:a3:ad:43:39:a2:e3:0a:
f5:5d:eb:4b:59:d4:ff:59:1d:a0:10:e9:f5:18:01:
b2:3d:9f:63:57:d7:b1:3e:53:a3:91:86:b4:5f:aa:
20:f0:ea:9b:49:3d:13:97:5b:ce:78:35:d1:fb:1b:
16:c9:91:1c:92:46:b9:66:dd:ba:d0:f7:cf:4f:9a:
01:67:d7:6b:ff:2c:2e:c5:5d:47:20:33:52:7c:75:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:35:4B:0E:E7:4A:9B:12:ED:B0:B3:77:B7:15:42:59:4D:AE:4B:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1794D34C4E8F11F09F19E4CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.8.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:93:ca:23:df:16:12:89:39:a1:f2:ca:3f:77:4a:bb:9f:37:
01:40:3c:f7:c9:3d:ec:ed:d6:86:8b:f6:38:05:5c:9c:fd:3a:
3e:1c:c4:dd:e7:ba:9c:55:be:73:95:03:3b:8b:6e:14:09:28:
f3:8b:9e:cc:db:b6:49:91:cd:05:3a:71:a5:85:ce:42:4a:a4:
fd:38:2e:b0:c8:54:4b:dd:ba:91:e7:07:a3:0e:5a:47:9d:a3:
e9:90:0f:a1:27:03:0d:4d:b3:c5:b9:a2:71:a8:1d:fe:6d:66:
89:75:9f:2c:3f:1c:60:69:60:16:12:fc:f6:8d:b5:22:50:31:
25:49:d9:c1:44:e2:8f:cc:86:11:b6:4a:39:6f:02:b6:65:59:
bd:3c:38:8a:87:d2:09:36:44:18:92:84:af:52:d4:5f:dc:e5:
1d:2b:70:56:3b:b9:c5:19:95:3a:bc:46:c8:8f:90:20:a1:dc:
0b:6d:c0:6e:8f:a2:09:71:fa:74:d2:ec:e9:4b:5a:a5:b6:ed:
70:70:b9:c6:9f:25:cb:14:c6:87:cd:97:f2:57:a8:38:12:be:
84:94:62:ea:a7:8e:cf:58:75:5e:9d:c5:19:df:53:27:63:21:
0f:09:db:51:99:6a:c6:40:74:fa:d2:24:32:e6:dc:1e:4f:c0:
dd:da:d4:38
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAV22MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjIxMTEwMTI5WhcNMjUwNzI3MTEwMTI5WjAYMRYw
FAYDVQQDEw02ODU2OTEwZC05YmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAou1+b4vx2Z2Ty7HNMqroC7P4C+tsKv+SpJoK6gd1AQD1T3wmRqIUP8Bb
Du4xyKJhg8kpbvz+ChzkSSsNS0BlloYqw2tAjZcq6mCNy9VUMX7MbCSedBWcNzFs
Dd/YSY2MQggavYjblgQyLbc4MBAaNwIOve75jUjNVNgN2C1YeFEdlP4rtvy+3DOX
wwo2RHKarXhNYUpSCVT5t40CK8G3UPdDbA5vMC86E2v6/KOtQzmi4wr1XetLWdT/
WR2gEOn1GAGyPZ9jV9exPlOjkYa0X6og8OqbST0Tl1vOeDXR+xsWyZEckka5Zt26
0PfPT5oBZ9dr/ywuxV1HIDNSfHWIPQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDM1
Sw7nSpsS7bCzd7cVQllNrkv4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNzk0RDM0QzRFOEYxMUYwOUYxOUU0Q0NEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAIMA0GCSqGSIb3DQEBCwUA
A4IBAQCbk8oj3xYSiTmh8so/d0q7nzcBQDz3yT3s7daGi/Y4BVyc/To+HMTd57qc
Vb5zlQM7i24UCSjzi57M27ZJkc0FOnGlhc5CSqT9OC6wyFRL3bqR5wejDlpHnaPp
kA+hJwMNTbPFuaJxqB3+bWaJdZ8sPxxgaWAWEvz2jbUiUDElSdnBROKPzIYRtko5
bwK2ZVm9PDiKh9IJNkQYkoSvUtRf3OUdK3BWO7nFGZU6vEbIj5AgodwLbcBuj6IJ
cfp00uzpS1qltu1wcLnGnyXLFMaHzZfyV6g4Er6ElGLqp47PWHVencUZ31MnYyEP
CdtRmWrGQHT60iQy5tweT8Dd2tQ4
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:23:01 2025 by rpki-client